Privacy Policy

Blast: On Campus LLC (“Blast,” “we,” “us,” or “our”) operates the Blast mobile app, a platform for discovering campus events, joining circles, and buying event tickets. This Privacy Policy explains what we collect, why we collect it, who we share it with, and the choices you have.

1. Information We Collect

Account Information

• Phone Number (required) — used to sign in with a one-time code
• First and Last Name — displayed on your profile
• Email Address — used for account recovery and notifications
• Date of Birth — used to verify you are 18+
• Profile Photo (optional) — displayed on your profile
• Campus Affiliation and Interests — used to show you relevant events and circles

Business Accounts

• Accounts that host events as a business also provide a business name and category.

Connected Social Accounts (optional)

• If you choose to connect a social media account, we receive your username and a platform-assigned identifier from that platform. Currently supported: Snapchat. Instagram, TikTok, and X (Twitter) may be added in the future.
• You may disconnect any linked account at any time from your profile settings.

Content You Create

• Event details (title, description, location, time)
• Circle information and descriptions
• Chat messages and photos you send
• RSVPs, saved events, and ratings
• Profile, circle, and event photos you upload

Event Locations

When an event host selects an address, we store that event’s location so the event can appear on the campus map. This is the location of the event, not of any person.

Your Location on the Map

If you grant location permission, the campus map can show a dot for where you are. That dot is drawn by your phone’s own map software while the map screen is open. Your location never reaches us. We do not receive it, store it, or share it with anyone. You can decline the permission, or turn it off later in your device settings, and the map still works normally.

Payments and Tickets

When you buy an event ticket or subscribe to a business plan, payment is processed by Stripe. Your card number is entered into Stripe and never touches Blast’s servers — we do not see it or store it. We keep records of your tickets and transactions, including the event, amount, and status.

Organizer Payouts

Event hosts who sell paid tickets set up payouts directly with Stripe. Bank account details and identity information (such as an SSN or EIN) are entered on Stripe’s own pages and held by Stripe — Blast never receives or stores them. We store only a reference to the host’s Stripe account and whether payouts are active.

Information Collected Automatically

• Circles you join and leave
• Events you view, save, RSVP to, and attend
• Device type, model, and operating system
• Push notification tokens, if you allow notifications

What We Do NOT Collect

• Your device’s location — the map dot stays on your phone and is never transmitted to us
• Contacts — we do not access your phone’s contact list
• Card numbers and bank details — these go directly to Stripe, never to us
• Biometric data — we do not collect fingerprints or face scans

2. How We Use Your Information

• Run the app: sign-in, your campus feed, circles, chats, tickets, and the map
• Personalize what you see, based on your interests, circles, and activity
• Send event reminders, waitlist updates, and campus digests
• Process ticket purchases and pay organizers after their events
• Enforce our rules, handle reports, and prevent abuse and fraud
• Improve existing features and develop new ones

3. How We Share Your Information

With Other Users

Your profile name and photo are visible to users at your campus. Circles you join are visible to members of those circles. When you RSVP to an event, your name is shared with the event organizer, who can see the attendee list. Members of a group chat can see your messages and photos in that chat. Private circles are visible only to their members.

With Service Providers

• Supabase — authentication and database hosting
• Stripe — payment processing for tickets, subscriptions, and organizer payouts
• Google (Places) — converts event addresses into map locations when hosts create events
• Expo — app distribution and push notification delivery
• Snapchat (Snap Inc.) — social account linking. If you connect your Snapchat account, Snap processes your login and shares your display name and account ID with us. Snap’s privacy policy applies to data they collect during this process.

We may add support for additional social platforms (such as Instagram, TikTok, and X) in the future. This policy will be updated and you will be notified of any material changes before such integrations go live.

What We Don’t Do

• We do not sell your personal information
• We do not share your information with advertisers
• We do not use your data for targeted advertising
• We do not track you across other companies’ apps or websites

4. Data Retention

We retain your information for as long as your account is active. When you delete your account, your profile information is removed from our active systems within 30 days, and backup copies may persist for up to 90 days. Some records, such as payment transactions, may be retained longer where required for legal, tax, or fraud-prevention purposes.

5. Your Rights and Choices

• Access your profile information anytime through app settings
• Update your name, email, profile photo, and interests
• Turn off push notifications in your device settings
• Turn off location permission in your device settings
• Delete your account at any time via Profile → Settings → Delete account
• Request a copy of your data by emailing team@blastoncampus.com

6. Security

• Data is transmitted over encrypted connections (TLS/SSL) and stored encrypted
• Access controls, including row-level security, restrict who can read what — users can only reach data they are allowed to see
• Secure phone-based authentication
• Limited employee access to personal data

No system is perfectly secure, but Blast is designed so that a given account can only access the data that account is entitled to.

7. Children’s Privacy

Blast is intended for users 18 years of age and older. We do not knowingly collect information from anyone under 18. Contact team@blastoncampus.com if you believe a minor has provided their information, and we will remove the account.

8. California Privacy Rights (CCPA)

California residents may request to know what personal information we collect, request deletion, and opt-out of any sale (note: Blast does not sell personal information). Contact team@blastoncampus.com with “California Privacy Rights Request” in the subject.

9. European Privacy Rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to access, correct, delete, restrict, and port your data. Contact team@blastoncampus.com to exercise these rights.

10. Changes to This Policy

We may update this policy from time to time. For material changes, we will update the effective date above and notify you through the app or via email. Your continued use constitutes acceptance of the updated policy.

11. Contact Us

Privacy inquiries: team@blastoncampus.com
Support: team@blastoncampus.com